StackRadar

CVE-2026-78408

High

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.9
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,738
of 17,828 indexed, latest versions
Container images
2,748
deployed by those charts
Fix available
2 of 3
affected packages

CVE-2026-78408 affecting package util-linux 2.40.2-5

Carried by container images the latest versions of 2,738 of 17,828 indexed charts deploy, on 2,748 images.

Affected packageAffected versionsFixed inImages
util-linuxdeb1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:2.41.5-0+deb13u1+dhi3, 1:4.16.0-2+really2.41-5+47 more2.41.5-0+deb13u1+e22,488
util-linuxapk2.41-r9, 2.41.2-r0, 2.41.4-r0, 2.42-r0+1 more2.41.6-r1, 2.42.3-r1259
util-linuxrpm2.40.2-4.azl3no fix listed1
OSV records
ALPINE-CVE-2026-78408DEBIAN-CVE-2026-78408UBUNTU-CVE-2026-78408AZL-99393ECHO-3f6d-9602-8caa

Charts affected

2,738 by stars
ChartLatestAffected imagesRadar Score
keycloakkubelauncherVerified publisher0.4.41 of 1See more

keycloak kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/keycloakdigest-pinnedafe3bd73d7cf
util-linux@2.41.3-3ubuntu2
no fix listed

Open the chart page →

1,382
kubectlkubelauncherVerified publisher0.2.111 of 1See more

kubectl kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kubectldigest-pinned7280594a2f18
util-linux@2.41.3-3ubuntu2
no fix listed

Open the chart page →

1,285
mariadbkubelauncherVerified publisher0.5.71 of 1See more

mariadb kubelauncher 0.5.7

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mariadbdigest-pinnede25056a6ec52
util-linux@2.41.3-3ubuntu2
no fix listed

Open the chart page →

1,134
mongodbkubelauncherVerified publisher0.4.51 of 1See more

mongodb kubelauncher 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinned9bc37ed78a8b
util-linux@2.41.3-3ubuntu2
no fix listed

Open the chart page →

1,408
openldapkubelauncherVerified publisher0.2.01 of 1See more

openldap kubelauncher 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/openldapdigest-pinned8978aa002bc0
util-linux@2.39.3-9ubuntu6.4
no fix listed

Open the chart page →

1,308
rabbitmqkubelauncherVerified publisher0.2.111 of 1See more

rabbitmq kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/rabbitmqdigest-pinnedff5a36a457f1
util-linux@2.39.3-9ubuntu6.5
no fix listed

Open the chart page →

1,146
rediskubelauncherVerified publisher0.5.11 of 1See more

redis kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/redisdigest-pinnedbcd8e9a6224f
util-linux@2.41.3-3ubuntu2
no fix listed

Open the chart page →

836
zookeeperkubelauncherVerified publisher0.2.111 of 1See more

zookeeper kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/zookeeperdigest-pinned7826e9caa461
util-linux@2.41.3-3ubuntu2
no fix listed

Open the chart page →

1,089
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
itzg/bungeecord:latestde76286c0e73
util-linux@2.41.3-3ubuntu2.2
no fix listed

Open the chart page →

2,673
openclawopenclawVerified publisher1.93.01 of 2See more

openclaw openclaw 1.93.0

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
util-linux@2.39.3-9ubuntu6.6
no fix listed

Open the chart page →

3,056
quickwitquickwit0.8.171 of 1See more

quickwit quickwit 0.8.17

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
util-linux@2.38.1-5+deb12u1
no fix listed

Open the chart page →

3,453
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
util-linux@2.34-0.1ubuntu9.1
no fix listed

Open the chart page →

11,643
zillazillaOfficialVerified publisher2.4.31 of 1See more

zilla zilla 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/aklivity/zilla:2.4.3e33d59dbb606
util-linux@2.37.2-4ubuntu3.5
no fix listed

Open the chart page →

1,760
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/postgres:18.48ff36f3c6637
util-linux@2.41-5
no fix listed

Open the chart page →

2,935
zigbee2mqttandrenarchyVerified publisher9.44.01 of 1See more

zigbee2mqtt andrenarchy 9.44.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
util-linux@2.42.1-r0
2.42.3-r1

Open the chart page →

183
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
util-linux@2.37.2-4ubuntu3
no fix listed

Open the chart page →

4,305
penpotcodechemVerified publisher1.0.102 of 3See more

penpot codechem 1.0.10

2 of the 3 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
penpotapp/backend:1.16.0-betae978e871be07
util-linux@2.37.2-4ubuntu3
no fix listed
penpotapp/exporter:1.16.0-betafa7086ad92b1
util-linux@2.37.2-4ubuntu3
no fix listed

Open the chart page →

28,396
connaisseurconnaisseurVerified publisher2.13.01 of 2See more

connaisseur connaisseur 2.13.0

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/redisdigest-pinned83edc2b8e9ff
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

2,880
dependabot-gitlabdependabot-gitlabVerified publisher6.3.03 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

3 of the 3 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
util-linux@2.39.3-9ubuntu6.5
no fix listed
library/postgres:18.6-alpined3e1620b530c
util-linux@2.42.1-r0
2.42.3-r1
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
util-linux@2.42.1-r0
2.42.3-r1

Open the chart page →

36,799
devtron-operatordevtron0.23.36 of 11See more

devtron-operator devtron 0.23.3

6 of the 11 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
util-linux@2.39.3-9ubuntu6.2
no fix listed
quay.io/devtron/dashboard:c7b89667-690-39290c63823af3835
util-linux@2.42.1-r0
2.42.3-r1
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
util-linux@2.38.1-5+b1
no fix listed
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
util-linux@2.39.3-9ubuntu6.2
no fix listed
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
util-linux@2.39.3-9ubuntu6.2
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

33,425
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
util-linux@2.39.3-9ubuntu6.2
no fix listed

Open the chart page →

3,823
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
util-linux@2.39.3-9ubuntu6
no fix listed

Open the chart page →

5,470
grayloggroundhog2k0.13.101 of 1See more

graylog groundhog2k 0.13.10

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
graylog/graylog:7.1.9598bd41fefd5
util-linux@2.39.3-9ubuntu6.6
no fix listed

Open the chart page →

1,157
nextcloudgroundhog2k0.22.71 of 3See more

nextcloud groundhog2k 0.22.7

1 of the 3 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/nextcloud:35.0.0:35.0.0-apache3e9f6eaa5dc8
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

3,978
hcloud-csihcloud2.23.01 of 6See more

hcloud-csi hcloud 2.23.0

1 of the 6 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:v2.23.0024ea4b07161
util-linux@2.42.1-r0
2.42.3-r1

Open the chart page →

2,689
ilumilumOfficialVerified publisher6.7.34 of 19See more

ilum ilum 6.7.3

4 of the 19 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
util-linux@2.38.1-5+deb12u3
no fix listed
bitnamilegacy/postgresql:16233f361c5819
util-linux@2.38.1-5+deb12u2
no fix listed
ilum/api:6.7.3624fd09528c8
util-linux@2.41-5
no fix listed
ilum/marquez:0.54.06e1d709d41f8
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

22,408
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
util-linux@2.39.3-9ubuntu6.1
no fix listed

Open the chart page →

3,464
lakekeeperlakekeeperVerified publisher0.12.01 of 2See more

lakekeeper lakekeeper 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
util-linux@2.41-5
no fix listed

Open the chart page →

1,859
litmuslitmuschaos3.30.02 of 6See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
util-linux@2.38.1-5+deb12u3
no fix listed
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
util-linux@2.38.1-5+deb12u3
no fix listed

Open the chart page →

7,300
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
util-linux@2.41-5
no fix listed

Open the chart page →

5,705
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
util-linux@2.41-5
no fix listed

Open the chart page →

4,453
netris-controllernetrisai2.8.25 of 14See more

netris-controller netrisai 2.8.2

5 of the 14 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
netrisai/controller-grpc:4.6.0.00753178bf173c2
util-linux@2.34-0.1ubuntu9.6
no fix listed
netrisai/controller-telescope:4.6.0.00414d82948a8b2
util-linux@2.34-0.1ubuntu9.6
no fix listed
netrisai/controller-telescope-notifier:3.0.455e826ef9a5d
util-linux@2.34-0.1ubuntu9.6
no fix listed
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
util-linux@2.41.2-r0
2.41.6-r1
netrisai/controller-web-session-generator:0.2.0a030a31289f4
util-linux@2.34-0.1ubuntu9.3
no fix listed

Open the chart page →

30,605
hedgedocnicholaswildeVerified publisher1.1.01 of 1See more

hedgedoc nicholaswilde 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
util-linux@2.31.1-0.4ubuntu3.7
no fix listed

Open the chart page →

12,717
smtpntppoolVerified publisher2.4.01 of 1See more

smtp ntppool 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
util-linux@2.41-5
no fix listed

Open the chart page →

2,336
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
util-linux@2.38.1-5+b1
no fix listed

Open the chart page →

17,443
paperless-ngxpaperless-ngxVerified publisher0.3.223 of 3See more

paperless-ngx paperless-ngx 0.3.22

3 of the 3 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
util-linux@2.38.1-5+deb12u3
no fix listed
valkey/valkey:9.1.2c123e3715db6
util-linux@2.41.5-0+deb13u1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
util-linux@2.41-5
no fix listed

Open the chart page →

8,593
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
platform9community/api-gateway:latest40a4970de568
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
platform9community/customers-service:latest2089811e5cc6
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
platform9community/vets-service:latestd1165c94dfb3
util-linux@2.31.1-0.4ubuntu3.7
no fix listed
platform9community/visits-service:latest8d11b50368c6
util-linux@2.31.1-0.4ubuntu3.7
no fix listed

Open the chart page →

41,995
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
util-linux@2.37.2-4ubuntu3
no fix listed
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
util-linux@2.37.2-4ubuntu3
no fix listed

Open the chart page →

14,578
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
util-linux@2.34-0.1ubuntu9.1
no fix listed

Open the chart page →

11,900
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
util-linux@2.41.5-0+deb13u1
no fix listed
thingsboard/tbmq-node:2.4.070661025dba5
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

3,465
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
util-linux@2.34-0.1ubuntu9.6
no fix listed

Open the chart page →

7,481
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
util-linux@2.34-0.1ubuntu9.1
no fix listed

Open the chart page →

6,411
elasticsearch-clusterwiremindVerified publisher4.5.21 of 2See more

elasticsearch-cluster wiremind 4.5.2

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
util-linux@2.39.3-9ubuntu6.5
no fix listed

Open the chart page →

2,378
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
util-linux@2.37.2-4ubuntu3
no fix listed

Open the chart page →

5,700
zigbee2mqttzigbee2mqtt2.14.11 of 2See more

zigbee2mqtt zigbee2mqtt 2.14.1

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
util-linux@2.42.1-r0
2.42.3-r1

Open the chart page →

1,178
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
util-linux@2.34-0.1ubuntu9.1
no fix listed
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
util-linux@2.34-0.1ubuntu9.1
no fix listed
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
util-linux@2.34-0.1ubuntu9.1
no fix listed

Open the chart page →

30,913
home-assistantalekcVerified publisher2.11.31 of 1See more

home-assistant alekc 2.11.3

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.3d89226851697
util-linux@2.42.1-r0
2.42.3-r1

Open the chart page →

2,162
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache9e915766488a
util-linux@2.41.5-0+deb13u1
no fix listed

Open the chart page →

2,223
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
util-linux@2.42.1-r0
2.42.3-r1

Open the chart page →

2,162
crowdatlassian-data-centerVerified publisher2.0.151 of 2See more

crowd atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-78408.

Container imageDigestPackageFixed in
atlassian/crowd:7.2.3c81cc7d6bc9e
util-linux@2.39.3-9ubuntu6.6
no fix listed

Open the chart page →

1,565

Container images carrying it

2,748 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

No deployed image carries CVE-2026-78408.

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.